

SecureDrop Inbox 1.0.0 released

SecureDrop Inbox offers new features, improvements


The new SecureDrop Inbox is coming
A new SecureDrop Inbox will be released in the next few weeks, the result of work begun by the team in July 2025 to redesign how journalists process submissions. SecureDrop Workstation users will receive it automatically during a system update.

How Dangerzone distributes container updates
When it comes to software updates, how can you be sure if the update server is not compromised, or if the signing key leaks? Learn about reproducible builds, transparency logs and software attestation, and how they apply to Dangerzone.

Help SecureDrop test WEBCAT Alpha
Like experimenting with cutting-edge software? Our decentralized project to verify web assets and in-browser code for web applications has entered alpha testing

Reproducing the reproducible images
How can you be sure that a piece of software has not been tampered with? Learn about the concept of “reproducibility” and how it applies to Dangerzone and other projects

SecureDrop: Looking back at 2025
Journalists are working harder than ever to protect their sources. SecureDrop has never been more important

Pwning Santa before the bad guys do — a bug bounty holiday tale
Santa’s security team has a challenge for you: craft him a letter that can bypass Dangerzone’s defenses and earn a bounty!

Dangerzone now automatically updates its sandbox
As part of an opt-in feature in our latest release, Dangerzone can now auto-update its sandbox.

Security Analysis of SecureDrop Protocol Presented at IETF 124
SecureDrop software engineer Cory Myers and ETH Zurich researcher Felix Linker gave a talk entitled “SecureDrop — From Design to Analysis” to the Usable Formal Methods Research Group at the 124th meeting of the Internet Engineering Task Force in Montreal on Nov. 4, 2025.The SecureDrop Protocol is …

Implementing ‘just-works’ printing in SecureDrop Workstation
SecureDrop serves as a tips entry point for news organizations, often with a small set of journalists reviewing incoming submissions and distributing them to the rest of the newsroom. The next-generation SecureDrop Workstation supports conveniently exporting submissions to encrypted USB drives and USB-connected printers.But getting printing to work can …

Introducing WEBCAT: Web-based Code Assurance and Transparency
Verifiable browser code is on the critical path for a redesigned version of SecureDrop and will benefit the wider browser security ecosystem as a whole. We introduce Web-based Code Assurance and Transparency, or WEBCAT, a code integrity mechanism for single-page browser applications.Read more on the SecureDrop blog or check …
